Horizon3 Announces NodeZero® Integration With Palo Alto Networks Cortex XSOAR

New Cortex Marketplace integration brings evidence of exploitability into automated remediation and verification workflows

SAN FRANCISCO--(BUSINESS WIRE)--Horizon3, the AI-native proactive security leader, today announced the availability of its NodeZero^® integration with Palo Alto Networks Cortex XSOAR on the Cortex Marketplace. The integration brings NodeZero’s high and critical findings on security vulnerabilities and other weaknesses into Cortex XSOAR as actionable incidents, helping teams use exploitability evidence to prioritize remediation, orchestrate the work, and return to NodeZero to verify fixes.

Security teams have extensive vulnerability data and powerful automation to orchestrate remediation at scale. What they often lack is evidence showing which vulnerabilities and weaknesses attackers can actually exploit and whether remediation eliminated the underlying risk.

The NodeZero integration for Cortex XSOAR connects those capabilities, bringing pentest evidence into orchestrated remediation. NodeZero autonomously tests environments to identify security vulnerabilities and other weaknesses, map attack paths, and provide evidence of impact and remediation guidance. Cortex XSOAR ingests high and critical open findings identified by NodeZero as incidents. Existing automation and playbooks can then enrich, route, track, and orchestrate remediation. After a fix is implemented, teams can use NodeZero 1-Click Verify to retest eligible findings and determine whether they remain exploitable.

“Organizations have invested heavily in security tools and automation. The opportunity now is to prove those investments are producing better security outcomes,” said Snehal Antani, CEO and co-founder of Horizon3. “By bringing NodeZero’s exploitability evidence into Cortex XSOAR, teams can prioritize what to fix based on what testing revealed, automate remediation, and verify that the outcome changed. It gives leaders evidence that their defenses are working and their security investments are delivering measurable value.”

“Effective security orchestration starts with high-quality inputs,” said Daniele Di Mattia, VP, GTM Strategy & Operations at Palo Alto Networks. “NodeZero adds attacker-validated exploitability context to Cortex XSOAR, helping security teams focus automation and remediation on the weaknesses that matter most. Together, we’re helping customers turn better security context into faster, more informed action through the workflows they already use.”

How the Integration Works: From Proven Exploitability to Verified Remediation

The integration enables a continuous workflow across NodeZero and Cortex XSOAR:

• Find: NodeZero autonomously identifies security vulnerabilities, other weaknesses, and attack paths. High- and critical-severity findings are automatically ingested as actionable incidents, complete with affected asset data, exploitation evidence, and clear remediation guidance.
• Fix: Cortex XSOAR accelerates response by enriching incidents with asset context, routing them to the right teams, and leveraging existing playbooks to automate remediation across security and IT systems.
• Verify: After remediation, teams can use NodeZero 1-Click Verify to retest the finding and confirm whether it is no longer exploitable. Because Cortex XSOAR ingests open vulnerabilities from NodeZero, successfully remediated weaknesses stop returning as open incidents, while weaknesses that remain exploitable continue to surface for action.
• Repeat: Scheduled testing and automated workflows help organizations continually identify exploitable exposures, remediate what matters, and verify outcomes as environments change.

As AI accelerates the speed at which attackers can discover and exploit weaknesses, defenders have less time to respond. Security teams need greater confidence that they are proactively fixing what matters and their remediation efforts are effective. By continuously identifying exploitable attack paths, driving remediation, and verifying that fixes worked, NodeZero and Cortex XSOAR help organizations build continuous resilience through a repeatable Hack, Fix, Verify, Repeat operating model.

The NodeZero integration for Cortex XSOAR is certified by Palo Alto Networks and available now on the Cortex Marketplace.

About Horizon3

Horizon3, the AI-Native Proactive Security Company behind NodeZero^®, shifts the advantage from attackers to defenders by giving organizations the power to fight AI with AI. NodeZero, the World’s Best AI Hacker™, autonomously tests defenses at machine speed, safely uncovers and prioritizes exploitable attack paths, instantly verifies fixes, and drives a continuous hack, fix, verify loop. More than 7,000 organizations, including global defense agencies, Fortune 10 enterprises, multinational banks, and major healthcare providers, trust Horizon3 for security they can prove. Horizon3 was recently named the Fastest Growing Cybersecurity Company in North America by the Deloitte Technology Fast 500 and named one of the Most Innovative companies by Fast Company in 2026. Follow Horizon3 on LinkedIn and X.